Andrea Chiarelli

Principal Developer Advocate

I have over 20 years of experience as a software engineer and technical author. Throughout my career, I've used several programming languages and technologies for the projects I was involved in, ranging from C# to JavaScript, ASP.NET to Node.js, Angular to React, SOAP to REST APIs, etc.

In the last few years, I've been focusing on simplifying the developer experience with Identity and related topics, especially in the .NET ecosystem.

Andrea Chiarelli

All posts

Authentication and Authorization Enhancements in .NET 9.0

What Are OAuth Pushed Authorization Requests (PAR)?

Bring Your Own Key (BYOK) in Auth0

ASP.NET Core Authentication Behind Proxies

The Curious “Case” of the Bearer Scheme

Identity Challenges for AI-Powered Applications

Use Private Key JWTs to Authenticate Your .NET Application

Developer Day 2024 Is Here!

New Templates for Building .NET Apps with Auth0 Authentication

Introducing the Auth0 Session Management API

The Backend for Frontend Pattern

Call Protected APIs from a Blazor Web App

Common Developer Misconceptions About Passkeys

Auth0 SDK for .NET Desktop and Mobile Applications Supports MAUI

Add Auth0 Authentication to Blazor Web Apps

OAuth 2.0 Security Enhancements

Auth0 Templates for .NET: A New Powerful Version Released

Cookies, Tokens, or JWTs? The ASP.NET Core Identity Dilemma

.NET 8: What's New for Authentication and Authorization

How to Validate JWTs in .NET

Blazor Server and the Logout Problem

The Not-So-Easy Art of Logging Out

Introducing Auth0 Templates for .NET

Support Auth0 in Azure Static Web Apps for Blazor WebAssembly Apps

Role-Based Access Control in Blazor Applications

Join Developer Day 2023!

How Fine Grained Authorization Solves the Most Critical API Security Risk

Managing Tokens in .NET MAUI

Add Auth0 Authentication to Blazor Hybrid Apps in .NET MAUI

Zen and the Art of Identity Management

Test Authorization in ASP.NET Core Web APIs With the user-jwts Tool

What's New in .NET 7 for Authentication and Authorization

Call a Protected API from a .NET MAUI App

Choosing the Right .NET SDK for Auth0

Use Refresh Tokens in ASP.NET Core Apps

Call Protected APIs in ASP.NET Core

Force HTTPS in ASP.NET Core Apps

Add Authentication to .NET MAUI Apps with Auth0

Security and Web Development

Securing Razor Pages Applications with Auth0

URL, URI, URN: What's the Difference?

Migrating Auth0 Hooks to Auth0 Actions

Securing Blazor WebAssembly Apps

What is Blazor? A Tutorial on Building Web Apps with Authentication

Using HTTPS in Your Development Environment

Encoding, Encryption, and Hashing

Country-Based Access with Auth0 Actions

Managing Trial Periods with Auth0 Actions

Customize User Registration Experience with Auth0 Actions

Forbidden, Unauthorized, or What Else?

Add Authentication to Your ASP.NET Core MVC Application

Permissions, Privileges, and Scopes

.NET 6 Highlights

Role-Based Authorization for ASP.NET Web APIs

Exploring the Auth0 ASP.NET Core Authentication SDK

ID Token and Access Token: What's the Difference?

Permission-Based Security for ASP.NET Web APIs

Building ASP.NET CRUD Web APIs

Authorization for ASP.NET Core Web APIs

Secrets Management in .NET Applications

Five C# Features You Might Not Know

What is .NET? An Overview of the Platform

.NET Core vs .NET Framework vs .NET Standard: A Guided Tour

How to Create Your .NET Project Template

Using C# Extension Methods for Auth0 Authentication

Preventing HTTPS Downgrade Attacks

Managing Third-Party Assets Security Risks in Your Web Apps

Five Things You Should Know About .NET 5

Clickjacking Attacks and How to Prevent Them

Prevent Cross-Site Request Forgery (CSRF) Attacks

Auth0 Marketplace: Add Identity Proofing to Your Applications

Defend Your Web Apps from Cross-Site Scripting (XSS)

JavaScript: What's New in ECMAScript 2020

Using xUnit to Test your C# Code

Securing gRPC-based Microservices in .NET Core

Understanding Dependency Injection in .NET Core

Beyond JavaScript Frameworks: Universal Login Button Component

Implementing Microservices with gRPC and .NET Core 3.1